10:04:59 Seen in the recorded video. And with that out of the way, 
again, thank you all for, joining EFFs fall members speak easy. 
10:05:12 It's great to see so many people in the audience on a Tuesday 
morning to learn about digital freedoms. 

10:05:17 Love to see it. If you're feeling up to it, Maybe let's warm 
up the chat box. 

10:05:23 Feel free to write like where you're from in there. Let 
everyone know. It's great to see how many supporters are from around 
the world here. 

10:05:34 About twice a year we like to do these member meetups for 
everyone to learn about digital freedoms, meet some EFF staff, meet 
some other like-minded folks. 

10:05:47 So it's great to see you all here. As just a quick reminder, 
the reason that we can do this work is because of the support from 
people Like you. 

10:05:57 We do this because you're able to donate. Talk to your 
senators that kind of stuff help us out. 

10:06:03 So it's really great to. See the people that make our work 
possible here. So thank you. 

10:06:09 And with that said, we're going to talk about some of the 
issues EFF has been working on in both the US and around the world 
Surrounding governments justifying increased surveillance and 
censorship as a way to quote unquote protect the kids. 

10:06:24 So today we're gonna invite a couple of staff members to 
expand on some of the bills we're fighting. 

10:06:30 What you can do to push back and, how we can get things 
right. So first up, I'm gonna introduce, EFF staff attorney, Mario 
Trujillo. 

10:06:40 At EFF, Mario focus on focuses on fourth amendment and 
privacy rights. He is also part of the coders right project. 
10:06:48 Prior to joining EFF, Mario was an attorney at the privacy 
law firm as well, Jen, and clerked for a federal magistrate judge on 
the southern border. 

10:06:57 And worked as a technology policy reporter at the Hill 
newspaper. Hello, Mario. 

10:07:03 Hey Christian, it's good that everyone's here in the chat. 
I'm gonna be talking about. 

10:07:09 If you know that some constitutional problems with a few 
state privacy, state child safety laws that have been struck down as 
unconstitutional. 

10:07:19 Let me, bring up my slides. 

10:07:24 And so like Christian said, my name is Madio Trujillo. I'm an 
EFF staff attorney mostly focusing on privacy. 

10:07:32 So we're going to talk about a few of these state child 
safety laws. And so the. 

10:07:39 The basic framework is these child safety laws have 2 
features to them. One is age verification and the second one is 
content blocking. 

10:07:48 And so it's important to understand how these interact 
together. And so most of these laws are require a company to verify 


the age of their users. 

10:07:57 If that user, is determined to be a minor, usually that's a 
person who's under 17, the laws require the service provider to block 
certain content for that minor. 

10:08:11 That's either by restricting that minor from accessing the 
product at all or it's giving that minor a diminished product. 
10:08:21 So it's a social media platform with, some harmful content 
removed. And so It's a one way to look at it is age verification is 
kind of the mechanism that enables the the platform to sensor or block 
content. 

10:08:39 And so we'll talk about each one of those. And so what are 
the problems with age verification? 

10:08:45 First, it's important to understand, what type of age fair, 
we're talking about that it goes from sort of least invasive to most 
invasive to most invasive. 

10:08:54 And so at the least invasive to most invasive to most 
invasive. And so at the least invasive you've probably seen, of least 
invasive to most invasive. 

10:08:58 And so at the least invasive, you've probably seen a button 
that requires you to test that you're either over at the age of 13 or 
over the age of 17. 

10:09:03 More invasive than that is. A button that requires you to 
enter your birth date more invasive than that is. 

10:09:12 A requirement that a platform, verify your age through 
government ID, either a passport or a driver's license. 

10:09:20 And even more invasive than that is a. Recording or a screen 
capture of your face in order to run it through a biometric algorithm 
for the algorithm to estimate the age of a person based on their 
facial facial geometry. 

10:09:37 And so each one of those has inherent problems, but they all 
kind of have these 4 problems within them. 

10:09:44 And so the first one is privacy and security. And so by 
implementing an age gate and age verification system especially in age 
verification system that requires government ID, you're sort of 
eliminating one of the the initial sort of bargains that the internet 
is that, you can browse the internet anonymously. 

10:10:05 The second problem is that. Hey, DATA verification systems 
require data. And so that's data that a technology company can either 
reuse or resell or re purpose for some other use. 

10:10:20 It's important to remember that a lot of these laws have 
restrictions on what the tech company or the the platform can do with 
that that age verification data but you know you're putting your data 
in the hands of a extra data in the hands of the technology company in 
your, you know, sort of relying on them to do. 

10:10:40 To do what's right. So one, there's bad actors who might 
misuse that data. 

10:10:47 There's also, threats of data breaches, you know, and that, 
no law can really protect you from a data breach. 

10:10:54 And so sometimes the best use restriction is just a, 
collection restriction. Next, there are speech concerns and the speech 


concerns overlap with privacy concerns and so under the US First 
Amendment, there is a right to access and distribute data anonymously, 
the age verification systems obviously would I hinder that, especially 
age verification systems that require government IDs. 

10:11:22 It, they also, These age verification systems would also 
deter both adults and children from accessing certain content. 
10:11:32 And so certain content that is either a embarrassing or 
sensitive, a person might not want to have their name associated with 
that search term. 

10:11:41 Or that's that query. And so that's going to deter both the 
adults and children from accessing that content. 

10:11:48 There's also a second deterrence is that some privacy 
conscious people won't want to make that bargain that you know I want 
to read this news article but I don't want to give up my personal data 
to do it and so that's also going to be a deterrence from allowing 
people to access certain content. 

10:12:05 Moving down the list to discrimination this is mostly in the 
context of age verification systems that require a government ID. 
10:12:16 First off many children don't have a government ID you know i 
didn't i grew up in a small town and i didn't travel a lot and so I 
didn't get a passport until I was 18. 

10:12:28 I didn't get a driver's license until I was 15 or 16. And so 
that eliminates a swath of children that don't have a government ID. 
10:12:37 More than that though, even there's certain populations of 
the, of it ended up adult population that don't have a government ID 
ID. 

10:12:46 That's the other. Focused in low income areas or in the 
undocumented community and so that would either eliminate those people 
from accessing platforms in general or create extra barriers for them 
to. 

10:13:00 Access the platform. And then finally there are accuracy 
issues and this is specifically in regard to the age estimation 
through biometric collection. 

10:13:10 This is a new technology that's not perfected and it's 
questionable whether it could ever be perfected but at the current 
state. 

10:13:19 Age estimation can be off by a year or 2. And so when you're 
trying to Identify a 16 year old compared to an 18 year old, you know, 
you're gonna have a lot of mismatches. 

10:13:32 So that's going to be either over inclusive or under 
inclusive. So that's the first, those are the problems with age 
verification. 

10:13:38 The second, thing is what, what's the problem with content 
blocking? I won't spend a lot of time on, problems with content 
blocking because they seem pretty self evident. 

10:13:48 You know, if you enact a law that requires. Platforms to 
block a certain harmful content to children, they need to open up an 
age gate that is going to diminish, the platform for both adults and 
children alike. 

10:14:04 If you put up a age gate and you serve children a diminished 


project product based on a you know a a product that has Hold on 
harmful content removed. 

10:14:18 That's gonna sweep up a lot of protected content even that 
children have a first amendment right to access children have a you 
know they have maybe diminished First Amendment rights but they do 
have First Amendment rights to access content and so a lot of the the 
laws are written in a vague terms to block or sensor harmful content 
and sometimes that that term harmful can you know be anything it 
doesn't sometimes 

10:14:48 they're written to maybe block pornography but they're 
written in a way that it blocks all sexual content. 

10:14:55 And so. That's gonna be. Limiting children from, from 
accessing certain protected content. 

10:15:03 And then finally, children aren't a monolith. It's a lot of 
these laws are written to, to stave off. 

10:15:11 Harms to minors and that's you know it's sort of they minor 
is anyone below the age of 17 usually and so what is theoretically 
harmful to a minor might not be old what's theoretically harmful to an 
8 year old might not be harmful to a 13 year old might not be harmful 
to a 16 year old and so one of the key features of these Laws that 
10:15:36 have major problems is they treat children you know all from 
@ to 16 as a sort of one unit that has a So the same sensibilities. 
10:15:47 And so how is this played out on the ground? There's already 
been. 3 court cases that have 3 courts have issued injunctions which 
is just a temporary block. 

10:15:59 Of 3 of these child safety laws, one in Arkansas, one in 
Texas and one in California. 

10:16:05 So the one in Arkansas. It's requires age verification 
usually through government ID and if a person is determined to be a 
minor, they are blocked from the social media platform except with 
parental consent. 

10:16:21 In Texas. The age verification system worked for, for online 
platforms that had a certain amount of sexual content. 

10:16:31 If that platform determines that a child's, or that person is 
a minor, the person is completely blocked from that website. 

10:16:41 But the, you know, the term sexual content is very vague and 
it's over inclusive and it, you know, it can. 

10:16:47 Range from everything anything to from obscenity which is 
unprotected to pornography which is protected to you Know, sort of a 
Just to maybe a risque, photo or something like that. 

10:17:00 And so those 2 laws were struck down. Mostly because of the 
age verification. The courts said that. 

10:17:09 One, it's going to prevent adults from accessing. Protected 
speech because they're going to be deterred from from entering. 
10:17:17 Those platforms and then 2 even when the age verification 
works. And children. You know, are blocked from certain content. 
10:17:26 They're going to be blocked from, content that they have a 
constitutional right to access. The California law is a little 
different in that it strongly encourages age estimation and so that is 
the would likely be the technique of a biometric phase scan. 


10:17:43 And that age estimation does 2 things. One, it requires 
companies to, block certain content to it would actually give children 
a privacy protections that would sort of be the lever to give children 
privacy protections. 

10:18:01 And so at EFF, we believe that age gate. Would be 
unconstitutional and it would sort of, that's the way to implement 
both the content blocking and the the privacy provisions and while we 
like Some of the privacy provisions even. 

10:18:17 Yeah, if they wouldn't have been sort of tangled up in this 
age verification system and content blocking system. 

10:18:25 You know, those privacy provisions are things we would like 
in a privacy bill, but when you, Use an age verification method like, 
you know, age estimation to implement that, that we think that, That's 
not gonna, that's not gonna withstand. 

10:18:41 First Amendment scrutiny. And so those are 3 laws that right 
now have been blocked. There are 2 other laws one in Texas and then a 
pair of laws in Utah which will likely suffer the same fate and in the 
next couple months and you know to the extent more and more states are 
passing these laws or. 

10:19:02 At the federal government more. Congress or the Senate passes 
these laws. They're likely gonna suffer the same fate, of just being 
struck down. 

10:19:12 The Arkansas, Texas and California law are up on a peel, but, 
as they stand now, they're on hold. 

10:19:19 And then, so what's the solution? I think. Here at EFF, we 
think that strong data privacy legislation can be a solution. 

10:19:29 And I think it does 2 things, these child safety laws can't 
do. The first one is that data privacy legislation has a strong track 
record of being upheld by the courts as constitutional just to take 2 
examples the federal wiretapping laws have been around for about a 
hundred years. 

10:19:53 The Supreme Court has called, HIPAA, which is a, data privacy 
law that regulates health data a a smart law, a, And so other laws 
have also been upheld. 

10:20:09 It's constitutional as data privacy legislation. So it's it's 
just data privacy legislation is better equipped to survive these 
court challenges. 

10:20:20 The second big thing is that data privacy legislation 
actually gets at one of the root causes of what people perceive as 
ills online and that's a. 

10:20:31 Sort of a surveillance apparatus that is. Meant to serve and 
deliver targeted ads. And so one of our key priorities is to ban 
behavioral advertising. 

10:20:42 And you add a data minimization and then you add a Strong. 
Enforcement mechanisms. We think that gets at a lot of the problems 
that. 

10:20:53 These child safety laws are trying to address in a sort of 
censorship regime. We think that data privacy legislation gets at 
that. 

10:21:05 In a more straightforward manner. 


10:21:08 And so finally, I'm gonna sort of pivot. I've been talking 
about state laws. 

10:21:15 These are Laws that have been enacted by states that were 
about to go into effect. That got struck down by the courts, but there 
are also federal proposals. 

10:21:24 Bills that are being debated in Congress and in the Senate 
that have many of the same problems, though not identical problems. 
10:21:32 And one of these bills is called the Kids Online Safety Act. 
Short name is KOSA. 

10:21:38 The Senate, this week is trying to use a procedural move to, 
pass COSA by unanimous consent and we have we've put up an action 
alert to have our members Call and. 

10:21:52 Voice their concerns to their senators. We have a action page 
at EFF. If you just, type in COSA, you'll find the action alert. 
10:22:01 And so we urge you, you all to spend 5 min today and call 
your senator if you're in the United States and ask them to not not 
RAM through this this dangerous child safety. 

10:22:15 And so I think that's it for me and I will hand it back to 
Christian. I'm happy to answer questions at the end. 

10:22:23 Thank you, Mario. That was really great and super interesting 
to learn about. We'll do Q&A's for Mario at the end of Mario. That was 
really great and super interesting to learn about. 

10:22:35 We'll do Q&A's for Mario will transition to EFF seniors free 
speech but let me restart EFF senior speech and privacy activist page 
callings at EFF page focuses on fulfillment of civil liberties and 
corporate threats to speech and privacy online. 

10:22:53 Page has worked with governments and activists across the 
globe to collaboratively facilitate change. Welcome page and excited 
to hear what you got to talk about. 

10:23:02 Thank you so much and thank you everyone for joining us 
today. I think we're so excited to to talk about this issue which is 
transcending boundaries across different countries. 

10:23:12 And an issue with so pervasive to kind of argue again. So 
like Mario, I'll be sharing some slides. 

10:23:19 Again, if you have any questions, please do. Put them in the 
chat and we'll end up to answer them at then. 

10:23:27 So. Here we have the Uk's online safety bill which is a 
really big piece of legislation. It's now unfortunately the online 
safety act. 

10:23:39 So I should enter. It's now the online safety act and I'll 
talk you through how that came to be and I'll talk you through how 
that came to be and why that came to be and why we're frustrated with 
it. 

10:23:47 Essentially, how that came to be and why we're frustrated 
with it essentially. So, you Know, we just asked us now the kids 
online safety, all the different legislation in the US, COSA, we have 
here early. 

10:23:56 When we think about these topics you might wonder why we 
care. Why is this such a big privacy issue? 

10:24:01 And I think essentially it comes down to one thing, which is 


that at our core, we all have the right to private conversation and to 
determine when we want to share information with our loved ones, with 
our family members, with our friends, and when that happens, who hears 
ITs 

10:24:16 And the moment and the mechanism upon which we we communicate 
that and a bunch of these pieces of legislation really erode on that 
right. 

10:24:22 And you know, in the human rights framework, that's protected 
under the right to privacy in lots of national and international 
mechanisms on human rights. 

10:24:31 But, it's really about choosing those moments and these bills 
kind of take away from that. And unfortunately, we're seeing at them 
in many places. 

10:24:39 So, Mario discussed the different pieces of legislation in 
the US but unfortunately we're seeing it in many places so Mario 
discussed the different pieces of legislation in the US but 
unfortunately we also have the online safety bill. 

10:24:49 So Mario discussed the different pieces of legislation in the 
US. So Mario discussed the different pieces of legislation in the US, 
but unfortunately we also have the online safety bill, now the Online 
Safety Act in the US, but unfortunately we also have the online safety 
bill in the US, but unfortunately we also have the online safety bill, 
now the online safety act in the United Kingdom. 

10:25:08 We have the child sexual abuse with protecting encryption but 
unfortunately with the online safety act we don't have that kind of 
trajectory so it's been a long process working with the online safety 
act. 

10:25:15 First it was emerged in 2,017 as the internet safety strategy 
green paper. And this strategy between paper emerged on the back, 
unfortunately, of a young girl in the UK who It was exposed and saw 
more than thousands of people, thousands of pieces of self-harm 
content in the weeks leading to her unfortunately ending her life. 
10:25:38 When that happened, the government decided to attempt to take 
action to make the online space as you can see here the safest space 
in the world to go online and help shape an internet that is open and 
vibrant. 

10:25:52 But also protects its users from harms. A big claim you could 
say, but that was essentially the goal and that's where we're at. 
10:26:01 So in 2,022 the online safety bill was introduced following 
as you can see here in many years of consultations. 

10:26:08 Under its fourth prime minister, the online safety act passed 
just a few weeks ago at the end of October. 

10:26:16 It's changed a lot since the Internet Safety Strategy Green 
Paper. That was pretty targeted as a green paper. 

10:26:23 It had very kind of specific goals and asks pertaining to 
children's rights online as I mentioned emerging from the back of the 
young girl that lost her life or took her life in 2,017. 

10:26:35 And the bill that we ended up with. Is certainly very 
different to that. Kind of, so we look at kind of what we've been 
working on with EFF actions and the online safety bill. 


10:26:55 There were 2 kind of what we've been working on with EFF 
actions and the online safety bill. 

10:27:00 There were 2 kind of big focus areas that we've been working 
on with EFF actions and the online safety bill, there were 2 kind of 
big focus areas that we really orient in our work towards. 

10:27:04 The first was provision, And this piece of this They should, 
you know, like the online safety bill is 260 plus pages. 

10:27:10 It sought to contain everything, you Know, a, PPPP, 
pornographic content to doxing, to enter an encryption to clients, to 
doxing, to enter an encryption to clients that mandating clients like 
scanning so it was extremely broad and in this you know there were 
lots of different issues but the first one was that legal but harmful 
provision and that essentially you sought to 

10:27:30 criminalize any content that's definitely legal but was 
harmful so it might be insulting or inflammatory. 

10:27:36 This was illegal. This is an illegal provision. Under the UK 
and European and international law, you can communicate content that's 
either, you know, shocking, offensive, insulting and that comes 
actually from a court case that happened in the UK hand-decide versus 
United Kingdom. 

10:27:55 So That was a kind of one of the big core issues and we were 
working with coalitions, we submitted a consultation at a briefing to 
the consultation. 

10:28:03 And last year that Persian was removed from the online safety 
bill so of course you were thinking great this is fantastic the online 
that this legal but half of provision has been removed and things are 
just up from here, soon we'll get the end of the bill. 

10:28:18 But unfortunately once that provision was removed by the 
government they decided to go fully committed to eroding the right to 
end-to-end encryption and so that's kind of how our focus oriented in 
lobbying on this piece of decision. 

10:28:30 There were many clauses specifically close 1 10 which 
subsequently changed a number of different causes, which sort to 
mandate client side scanning. 

10:28:39 Of the credit with accredited technology and that accredited 
technology would be accredited by the government and the Uk's 
regulator. Ofcom. 

10:28:48 So all of this is very insular. Of course, we probably all 
know in this call you cannot have a technology that just is supposed 
to scan for a child's educational material or harmful content. 
10:28:59 A black door for one is a black so for all it's quite simply 
a fundamentally impossible and incompatible to have a piece of, you 
know, technology that can scan for one thing and and not everything. 
10:29:11 So we were trying to make this argument and I think I know 
what Mario was saying is this is such a polarizing issue. 

10:29:18 And I think what Mario was saying, it this is such a 
polarizing issue, we were saying, this is such a polarizing issue. 
10:29:20 We were talking lots with politicians, we held briefings, we 
were communicating with them on why this was such a problematic piece 
of legislation, we held briefings, we were communicating with them on 


why this was such a problematic piece of legislation and specifically 
this clause monitoring private messages. 

10:29:33 And many of them were saying, you know, maybe I agree, you 
know, I agree definitely, but I don't want to take that position 
publicly because I have to be seen as protecting children online. 
10:29:42 And if I don't support this bill, it seems like I'm not 
protecting children online. 

10:29:47 We were able to kind of get to a stage towards the end of the 
bill where there was a massive coalition of security researchers, 
cybersecurity experts, politicians, we had a number of different apps, 
Google, Signal, Meta, or many of the encryption apps as well and 
services, Apple saying this piece of legislation is terrible, most of 
them saying it if it does willing to be of ourselves from the UK 
market because 

10:30:11 we're not prepared to undermine encryption by, you know, 
complying with this with this legislation. 

10:30:16 We also held a private briefing in the House of Lords. 
Things, you know, and there was a big commitment, but unfortunately it 
seemed like it was 1, 1, 65 for many of these people in the house of 
peers in the House of Lords, which they were not prepared to take this 
stand, you know, they were they were very much communicating that they 
were in favor but. 

10:30:36 It was too much of a risk, a political risk for them to 
defend encryption, which ultimately in the discourse meant not caring 
about children's rights. 

10:30:45 So the bill passed. Here's one of the amendments you were 
trying to to edit, you know, you can say leave out privately. 

10:30:55 So we'll go through this for a long time. In the end the bill 
passed a few weeks ago as I mentioned, but not all hope is lost. 
10:31:01 So specifically with this bill that makes it quite different 
to many other pieces of legislation in the UK and internationally 
really is that it can't been printed overnight. 

10:31:13 So the bill itself is contingent on Ofcom implementing and 
creating and then implementing codes of conduct and guidelines and 
rules of practice. 

10:31:19 To implement this bill. So, The next stage and this will take 
years because as I mentioned there bill is 260 pages plus long every 
Single provision needs to be converted into an operational piece of 
legislation that that can be introduced. 

10:31:36 So Ofcom last week introduced their first guidelines. It's 
nearly a thousand pages long. So we've got a lot of reading ahead of 
us working on this bill. 

10:31:44 But it will be step by step so they've communicated that next 
year they'll be trying to seek to tackle the issue of encryption. 
10:31:51 And in that we've got a lot of capacity for influence. 
They're reaching out civil society. 

10:31:55 We had a private meeting with them last week and a number of 
our civil society politicians. We're in contact with them building out 
the this piece of legislation into something that can be 
operationalized into the law. 


10:32:07 So that's kind of one thing, building out the this piece of 
legislation into something that can be operationalized into the law. 
So that's kind of one thing. 

10:32:18 So it's not definitely, you know, it Second is litigation so 
maybe you're thinking this can't be legal. 

10:32:21 Maybe it's not I think there are lots of litigation options 
when we go forward. You know, we've got article 8 on the right to 
privacy, the right to private life on the European Convention. 
10:32:31 So that's one possible avenue of being able to take a 
specific component of this legislation to perhaps a judicial review in 
the United Kingdom or to the European Convent through the European 
Convention rights to European courts arguing that I could, illegality 
and legitimacy of this piece of legislation. 

10:32:51 And the campaigning side, so one of our colleagues is in 
London tomorrow for a meeting with signal and a number of civil 
society organizations to really discuss this this piece of legislation 
in the next step. 

10:33:03 So what can we do in our coalition? What can we do as EFF to 
make sure that the bill doesn't get get implemented essentially, you 
know, how can we stop this? 

10:33:12 How can we at an injunction or how can we advocate for people 
to recognise their rights before it even happens. 

10:33:17 So I think what's really interesting is that not all hope is 
lost. We've we've actually got a period of time now where because the 
bill cannot be implemented straightaway, we can really frame the 
language and discourse that's going to be going to be introduced. 
10:33:29 And I think when we like other pieces of legislation, for 
example, the CASA, the regulations against child sexual abuse in the 
EU. 

10:33:41 We are experiencing wins and so this is not an issue where 
the discourse is finalized and there is no chance of permeating 
through that. 

10:33:48 You know, it was mentioned in the chat already, but this 
piece of the, this regulation coming out of the EU is pretty much a 
same as coast. It's the same as online safety bill. 

10:33:57 It's just that it's attempting to stop the distribution of 
Known content. Actions against huge content, it has a detection order 
and of course introduces hindsight scanning as a preference. 

10:34:08 Today, so this is new. Information as of today, we reached a 
compromise deal. So following, you know, more than 7@ organizations 
working across the EU and Europe, working on this piece of this on 
this file in the European Union, we're able to reach a compromise by 
the European Parliament. 

10:34:27 Here are a few of the big winds, so no MASS scanning, which 
is a huge one. 

10:34:32 The scanning must be targeted with a specific suspicion. With 
judicial oversight, so unlike the Uk's online safety act, which has no 
judicial oversight or parameters on the use of accredited technology. 
10:34:42 This is very specifically targeted. Grooming detection is 
removed from the scope of detection orders and I think within this 


parameter what was really interesting about this regulation is that 
the EU wanted to introduce AI to detect any harmful content on text 
messages or in emails. 

10:35:01 And so removing that and having judicial oversight is really 
beneficial. Another is a, you know, protection at anti encryption 
which would be in screaming at the European Union to protect for a 
long time so private messaging apps cannot be subjected to any 
scanning technology. 

10:35:14 A for vacation as Mario discussed it at length earlier, no 
mandatory age verification for private messaging and absolute as well 
as safeguarding it. 

10:35:22 You can, you know, hear, hear about web crawling in Europol 
and then also blocking orders. 

10:35:31 So even now it's restricted, this is about web crawling in 
Europol and then also blocking orders. 

10:35:33 So even now it's restricted, this is still problematic, you 
know, it made possible on hosting services. 

10:35:34 So we reached a definitely a beneficial compromise based on 
months and months of advocacy at EFF and in a wider coalition. 
10:35:41 And the next steps, are you making what's next? So this will 
now go to the European Council. 

10:35:48 And where they will discuss that position which is is not 
necessarily known at this point. But there's selection in the Open 
Union next year and so if there's no compromise that can be met 
between the institutions, the file could get stuck. 

10:36:03 So we're going to keep the pressure on for a good final deal 
for consumers, but people in the European Union and I think we can 
take this this win here as an indication and a recognition that whilst 
we're fighting these bills, there there is you know there are 
challenges here you can see some some actions you know we're part of 
these campaigns. 

10:36:18 Raising awareness here is for a football match you know stop 
chat control. Edd you know European digital rights network have been 
coordinating this so it's really fantastic since the initiative. 
10:36:33 And here is just, I thought, you know, we're talking today 
about. You. 

10:36:35 S. Bills and and UK and Europe and Harry kind of all the 
lines in one picture which is essentially we've got people like Ashton 
Kutcher, you know, he, as of course, Clap, but coming to your European 
Union and being able to talk in in different chambers and institutions 
about this bill to protect the children. 

10:36:55 But I would be, you know, big emphasis kind of to conclude 
this presentation is. We know that this these bills introducing 
clients I have scanning, eroding the rights to end to end encryption 
and undermining technology is not only not protecting the children, 
but it's in deep putting them at further risk of harm, especially guns 
that rely on encrypted communications and private channels the most. 
10:37:15 So we'll continue doing that. You know, the UK, there's a lot 
of potential now to mold the implementation of the Online Safety Act 
and in the EU to really push for a final resolution that backs up 


today's win. 

10:37:29 Thank you so much. 

10:37:34 Cool. Thank you so much, Paige. That was great. I think, 
yeah, we got Mario back up too. 

10:37:40 So now, we've got some time to answer some of the audience 
questions that were coming up in the chat. 

10:37:45 So I think we'll just get started. This first one came from 
Kagan, which who said, would it make sense if we somehow all agreed on 
using a separate a separate trusted party. 

10:38:02 That would only provide this sort of ruling required age 16 
meets age true slash false. Normally I oppose eliminating it, but I 
doubt this issue will go away. 

10:38:14 Did you either if you all have thoughts? 

10:38:16 Yeah, so I think that's Sorry, I think that question. Is at 
that question comes up in the context of age verification and the 
question is, you know, if we move. 

10:38:28 This age verification to a trusted third party rather than 
the tech company. Does that make it safer? 

10:38:35 I think that that just moves the liability without 
eliminating the risk. And so instead of, you know, who's got that 
information, it's some third party that is unknown and maybe less 
trusted and so that could you know it could pose even more concern. 
10:38:51 That is unknown and maybe less trusted. And so that could, 
you know, it could pose even more concerns in case we don't or trust 
that company. 

10:38:55 It can also, I think it, creates sort of a large, honey pot 
for, data breaches. 

10:39:03 And so I think that rather than fixing the problem, I think 
it just moves the problem. But all the, all the concerns still remain. 
10:39:15 Thanks for that. Next up, this one comes from, Augusto? I was 
just wondering, are laws assigning you unique identifier numbers to 
babies at birth a common thing around the world or is it just Brazil? 
10:39:31 That certainly makes it easier for companies to track, track 
children's data and build dossiers of their behavior since birth. 
10:39:39 Nowadays, you can't do anything in Brazil without a kid's CPF 
number. 

10:39:45 I'd be there. We all, heard about that. 

10:39:46 Yeah, so I can talk about that from a US perspective. And so 
all, Everyone in the United States has a social security number, the 
social security number was originally set up to give benefits to 
people at the at the end of their retirement. 

10:40:07 I think the social security number in the United States is a 
good example of a of a survey. Identifiers slash data collection 
regime that was meant for a very normal or a very narrow set of 
circumstances that has really exploded into this not not a universal 
identifier in the United States, but it's definitely taken on a lot 
more prominence than. 

10:40:31 Than what it was designed for and because of that, the social 
security number is very, unsecure and, it has led to a lot of, 
financial fraud and so i think yet i think at least in the united 


states that is that's the thing I haven't heard of proposals that 
propose using a social security number or a social security hard as 
the form of age 

10:40:57 verification, but I, if, If an age verification system is 
asking for a government ID, I guess that. 

10:41:04 That could be one of the methods used, but I don't think that 
that is a. I don't think that's something that lawmakers are 
proposing. 

10:41:17 Cool. I think this next one will be for, you, with the recent 
passing of the online safety bill, do we expect to see messaging apps 
and services, do we expect to see messaging apps and services withdraw 
from the UK? 

10:41:33 And what would that look like? 

10:41:33 That's a great question. Thank you for asking it. 
Specifically because in the weeks leading up to the online, the final 
vote of the online safety bill in the House of Lords, a number of 
messaging apps and services decided to public, say that they would 
leave the UK market if the online safety bill passes, which indeed it 
now has. 

10:41:52 The rationale of those proclamations is that they don't want 
to undermine end to end encryption. 

10:41:58 On their sites and on their services and platforms and 
therefore the cost of compliance is too high and I think this point is 
interesting because there's a criminal liability and introduced in the 
online safety act for noncompliance with the provisions under this 
bill. 

10:42:12 So. Yeah, managers, meta, for example, or signal if they 
don't comply with this bill, can be imprisoned. 

10:42:20 They will also be fined extensively for non-compassing 14%. 
So it's very, very high amount of money. 

10:42:25 Fund and compliance of the annual turnover. And so when if 
you want to be services and now we're talking about tier one types of 
so big services if you're one of these these companies and so big 
services if you're one of these these companies and corporations 
you've got the these companies and corporations you've got the 
European Union where you have provisions and legislation and files to 
comply with and then you have the UK Online Safety Act which almost 
10:42:46 contradicts many of those and if you're working within all 
these countries it's perhaps Nonsense call to uphold the Online Safety 
Act when you've got 27 other countries in the European Union and a 
stronger risk of noncompliance for with those pieces of legislation. 
10:43:03 So I think it's left the, you know, in private conversations 
with some of these services, they have told me we're still very 
committed to upholding into an encryption. They have told me, we're 
still very committed to upholding into an encryption. 

10:43:15 We don't want to leave. It's certainly the last last option, 
but we still very committed to upholding into an encryption. We don't 
want to leave. 

10:43:19 It's certainly the last last option, but we still will if we 
can't reach a compromise on how the bill is implemented, and 


specifically on the technology that is supposed to be accredited to 
mandate client-side scanning. 

10:43:26 You know, we've got a declaration in the week before the 
online safety bill passed that the government recognized that right 
now the technology doesn't exist to scan for child sexual abuse 
material or harmful content and not scan for everything else which was 
a win because they refused to acknowledge that in 2,017. 

10:43:45 But, I think it's left to be seen. I hope that some of these 
corporations, indeed all of them, hold their word and and do leave the 
UK market. 

10:43:53 But of course, that 60 million people will be losing out and 
it's not just people in the UK. 

10:43:56 It's people communicating with those in the UK. You know, 
some of these encrypted apps are used by, you know, people who are 
seeking asylum and they're in detrimental situations coming out and 
they need to communicate for a safe passage into the UK. 

10:44:07 Or for human rights defenders sharing information from one 
country at risk to to maybe somebody in the UK. So it's not just 
people in the UK that will miss out. 

10:44:17 So I really hope that we can find a solution before these 
services have to make the United Kingdom. 

10:44:25 Cool. Thanks for that. This next one's really interesting. 
10:44:30 And something I've thought about before, from Grady. See Sam 
is such an emotional issue that excuses the entire framing of the 
issue. 

10:44:39 The issue is at the forefront to get people to accept 
Surveillance that they otherwise wouldn't. How can this framing be 
challenged? 

10:44:45 Surely overblocking is also harmful to children. 

10:45:@@ So good. 

10:44:54 Did I either of you guys have thoughts on challenging the 
framing for See, Sam. 

10:45:00 Yeah, I don't know if I can talk, sorry. But we actually 
found this, in the chat control. 

10:45:09 And the reason was that later in the game, the Europe policy 
critically inserted their own, phrasing. 

10:45:18 Like one paragraph or so where they basically said like any 
police can use this data so you should probably look for something 
like this because I would bet would be there as well. 

10:45:32 Okay, that's 

10:45:37 Hey, did you wanna say something? 

10:45:40 Yeah, thank you so much, Andrew, for sharing that. And 
indeed, I think this is probably the biggest issue is tackling this 
narrative. 

10:45:47 This discourse is so pervasive, it's so paramount. None of us 
don't want children to be protected, but by eroding their rights 
online, they are at more risk. 

10:45:57 I think it comes from a number of different angles and I've 
seen in the chat some conversations about how can we fight against the 
discourse of I've got nothing to lose so I don't mind an invasion of 


my privacy rights and I think it's about reorienting that framework to 
recognize that we do have these right so it's not about what's to lose 
but it's I have these and 

10:46:16 it's something to gain when we think about face surveillance 
for example it's face recognition is maybe one of the most lovely 
things ever you know when you see somebody that you know after a long 
time on the street or if you're you're going home for the holidays and 
you see your family members and your friends that's what face 
recognition should be used for it, should it be used to scan our faces 
and surveillance without 

10:46:35 our consent and I think we can take that same approach into 
messaging services we have these rights to privacy so we can 
communicate with our loved ones the information that we want to and 
when we want to and we know when that's going to be taken and not just 
for us but for the profits of big corporations and so restructuring 
that and trying to tackle it from a different angle because I think it 
can get really tricky also I 

10:46:55 think we've shown this many times. I go into another, but we 
have the right to priority. 

10:46:59 It's like, I don't have anything to lose. It's like, I don't 
have anything to lose. 

10:47:03 Children need protections. They have rights to they need 
anonymous channels and I think what's been super frustrating about 
these bills is especially in the UK is that a lot of the advocates for 
the bill have also anonymous channels that children can report abuse 
or bullying or so they recognize that children do need anonymous 
channels to to report the harms against them but apparently not 
online. 

10:47:22 So there's that I think so finally there's a much bigger 
issue which is that just because a child experiences harm online 
doesn't mean they're not experiencing harm offline and they're 
whatever happens online is not in a vacuum and so really building out 
frameworks for children to feel safe both online and offline. 

10:47:38 In a broader community holistic framework is also one 
approach to tackling that. 

10:47:48 I'm muted, sorry. Did you have anything to expand Mario or 
did Page cover at all for you? 

10:47:53 Well, so yeah, the bills that I, I outlined are less about, 
filtering and blocking CSM, but there are proposals in the United 
States, you know, that, in in this filtering and blocking would also 
create liability or could create liability for end-to-end encrypted 
apps. 

10:48:15 Those are I'm thinking of proposals like the Ernest Act or 
the St. Act. And I think one of the one of the answers to that is not 
to preframe the issue in that, you know, CSAM is despicable and it 
should be stopped. 

10:48:29 It's that law enforcement, at least in the United States, law 
enforcement has tools right now to, to address that. 

10:48:37 There, are laws that create liability if if tech companies 
don't report CSAM when they have actual knowledge to my knowledge that 


has never been a law that's enforced. 

10:48:51 That, sort of outlaw the promotion of that kind of material 
and that law is also, Not enforced and so. 

10:49:02 I think one answer is to ask why, you know, why these 
lawmakers are. 

10:49:07 Pushing these new proposals when they have enforcement tools 
and one of the one of the answers is for them to strengthen their 
enforcement of existing laws rather than creating new laws that create 
a lot of different problems and create a lot of uncertainty for end to 
end encrypted apps that like page said offer a lot of value and 
protection encrypted apps that like page said offer a lot of value and 
protection in and of themselves. 

10:49:36 Cool. Thank you. This next one, comes from Ben. 

10:49:42 I'd be curious to get y'all's perspective on the practical 
enforceability of potential client side scanning slash end to end. 
10:49:50 Provisions. Thinking less about the mega tech companies and 
more about every project uploaded to GitHub that provides encryption 
and whatnot. 

10:49:59 If the implications that every, OSS, I think that means open 
source. Project going to pull from some mandatory repository. 

10:50:11 Do you all have thoughts on that question? 

10:50:18 So. 

10:50:17 Maybe from the UK. 

10:50:23 No, no, you go ahead. 

10:50:24 Okay, I think, maybe taking the first part of the question 
about the enforceability of client side scanning, something that we 
try to emphasize in the UK and across the EU with with stop chat 
control is that. 

10:50:37 You know, it's not possible to protect rights and implement 
client-side scanning without, those rights. 

10:50:46 It's just fundamentally incompatible to have privacy and 
erosions on end to end encryption. 

10:50:49 So it's not enforceable. It's a and I think that's the thing 
that we've tried to emphasize in the UK specifically, which is that 
the technology that the government have consistently said over the 
last 5, 6 years is eggs are sick, you know, exists as possible. 
10:51:07 We can, we can scan for CSAM and other harmful content, which 
is also really a subjectively defined briefing list of topics and 
subject to change. 

10:51:16 We can scan for clients. We can scan for that and not scan 
for anything else. We can only use our technology and no other 
technology as possible. 

10:51:24 I think what we've tried to emphasize at each stage of that 
is it's not possible to enforce that without opening it up for 
everything else. 

10:51:29 So you have a back door for the government. With their credit 
technology, you're then opening it up for hackers for for rogue 
states, for harmful actors. 

10:51:38 To expose and take advantage of that. And, and in doing so, 
it's, it's, for, this privacy rights, unenforceable, but it didn't 


marry if you have a different elucidations on that. 

10:51:48 No, I'll leave it there. 

10:51:53 Cool. I think that we have a time for a few more questions. 
This is one, that's been on my mind that I think you could answer 
Mario. 

10:52:04 You talked a bit about, like a more consumer privacy laws as 
a way to fix some of these issues. 

10:52:12 So a lot of states including California already have privacy 
laws. Would a federal law replace these state laws or how would that 
work? 

10:52:21 No, no, so, the What EFF has advocated for a long time one of 
the one of the key pillars of a federal data protection law would be 
that it does not override state laws. 

10:52:36 And so that has that along with the, the consumer 
enforcement, provision has been a large sticking point, but we think, 
any federal privacy law should be sort of the floor of privacy in the 
United States and not the ceiling. 

10:52:52 And so if California which has been a leader in privacy 
legislation in the United States wanted to increase those privacy 
protections we think that's that's a good idea I think that's Going 
back to the sort of the purpose of the state and federal government 
states have have always been seen as sort of a laboratory for 
different laws. 

10:53:15 Different and improved laws and those sort of filter up to 
the federal level. And so I think any privacy law that. 

10:53:24 That gets enacted at the federal level, we we would. Push 
very hard to make sure that that's the floor and not the absolute 
through ceiling of what privacy protections in the United States look 
like. 

10:53:4@ Cool. Thank you. And, 

10:53:46 For page. How could the online safety bill affect other 
social media and child safety efforts in, Europe? 

10:53:55 So the online safety act has age verification. So like Mario 
explained, I won't duplicate because it's almost exactly the same. 
10:54:08 There, I won't duplicate because it's almost exactly the 
same. There are provisions within this bill that are trying to prevent 
children from seeing content that's almost exactly the same. 

10:54:15 There are provisions within this within this bill that are 
trying to prevent children from seeing content that's within this bill 
that are trying to prevent children from seeing content that are 
trying to prevent children from seeing content that are trying to 
prevent children from seeing content that's, you know, for example, 
pornographic, but again, harmful, which is pretty subjective. 

10:54:21 And it's requiring blocking children from, you know, children 
from viewing these, these websites in sight. 

10:54:25 So not only is it trying to scan for content but it's 
blocking children or those underage of using certain sites and I think 
you know, children are very innovative. 

10:54:36 It's not just having these build is not going to prevent 
children from viewing these platforms and it's it's a an incorrect 


solution to a problem that we've we've been trying to communicate for 
a long time now. 

10:54:46 So what happens in the UK we've mentioned so many times I 
think it's probably going to be a blueprint for similar builds around 
the world given that it's almost the first it's kind of have passed in 
such a way which has such erosions on client side of encryption 
through client side scanning. 

10:55:05 And probably we'll see duplications or at least now a 
commitment from other countries to Echo that I've heard that whilst 
I've spoken to governments around the world and that you know the UK 
have this pass in the UK so it's kind of involved in the them a lot of 
legislation but in that sense we just continue to fight back and as we 
want had you know have this win today a broad coalition of 
Organizations in the European Union 

10:55:28 been really fighting for the CISA regulation, a broad 
coalition of organizations in the European Union been really fighting 
for the CC regulation. 

10:55:39 So not all hope is lost and I think we can try and replicate 
those, strategies elsewhere and really make sure that you know the 
children that it can access you know have device to access the online 
world are safe but it in the way that we know best access the online 
world are safe, but it in the way that we know best and not by, 
preventing them from accessing certain websites and apps and by, in 
the way that we know best and not 

10:55:50 by, in the way that we know best and not by, preventing them 
from accessing certain websites and apps and by 

10:55:52 Okay, I will just quickly ask since I lost like, where in 
the, but I can tell you like in a very short, 5 min, are very short 
how we went to the you parliament with a and how it worked and maybe 
the reason how we want so maybe something you could reimplement or. 
10:56:15 You use for your environment. If you want, I don't know if 
it's this, if this, if this, until 8 or how much time do we have. 
10:56:29 I think we were close to, wrapping up, but I don't. I don't 
know if, Page Mario wanted to hear or if you wanted to like shoot us a 
note@infoateff.org. 

10:56:41 Everyone here can shoot us a note there and we go through all 
the emails and check those too. 

10:56:48 And I think you can you can also go on stop scanning us or 
you go on the entry website, the grouping digital rights. 

10:56:57 As just being mentioned, and you can find the campaign their 
calls stop scanning. That's Scott's going. 

10:57:02 And you can and you can find out that and that given the the 
news today and the win today in the European Union, given the news 
today and the win today in the European Union, you'll probably see 
lots on the EFF website in the coming days and different social media 
channels as well to hear that. 

10:57:16 But, please do follow up on that because it's a really good 
win in the landscape of pretty dire legislation. 

10:57:20 So we want to amplify that and share that. This legislation 
and these types of legislation. Can be, can be challenged and we can 


win and we want to replicate that in as many places as possible. 
10:57:38 Cool. And so with that, I think it's time to close out. So 
thank you. 

10:57:45 ALL for joining again and thank you Paige and Mario for 
presenting answering some questions. It was really great to hear from 
you all. 

10:57:53 And also just another reminder, thank you all for joining 
and, for being EFF supporters. 

10:58:01 Like I said at the start, the reason we're able to continue 
this work is because of your continued support. 

10:58:08 And if you know you're here and you haven't donated yet this 
year, we'd love to have you. 

10:58:14 Stay on as an EFF member. You can donate@eff.org size join. 
10:58:19 And if you have any questions for us, please send a note 
after, info at EFF. 

10:58:23 Dot org. But, until then, thank you guys so much and, we'll 
see you at the next one. 


